$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a633a3a2f34382d3438203d3e203536303431.roa File: 323430323a396238303a633a3a2f34382d3438203d3e203536303431.roa (raw, json) Hash identifier: cRuepGKtc1TobJR7snXsZ4GOQfK9pV3MV1CGNiDV1+A= Subject key identifier: 8E:4B:56:C8:EB:AD:D9:BD:27:61:B5:33:17:85:C9:25:03:0E:88:92 Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 089AAE4AEAAD723C9EE866B45524EE36EE142ED3 Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a633a3a2f34382d3438203d3e203536303431.roa Signing time: Wed 15 Apr 2026 09:35:30 +0000 ROA not before: Wed 15 Apr 2026 09:30:30 +0000 ROA not after: Wed 14 Apr 2027 09:35:30 +0000 asID: 56041 IP address blocks: 2402:9b80:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:9a:ae:4a:ea:ad:72:3c:9e:e8:66:b4:55:24:ee:36:ee:14:2e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Apr 15 09:30:30 2026 GMT Not After : Apr 14 09:35:30 2027 GMT Subject: CN=8E4B56C8EBADD9BD2761B5331785C925030E8892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6a:9d:18:dd:e1:e7:8a:e7:29:c6:e1:c4:d8: 26:24:40:86:57:83:0b:a7:cf:77:82:56:04:d1:91: 3f:22:a9:e0:3c:11:85:f5:64:37:82:5c:46:66:5d: 3e:21:85:33:9e:78:46:36:64:13:12:f2:75:c3:8a: 85:3b:df:9b:a7:6a:33:78:2a:32:9c:0e:9e:fe:98: 93:38:f7:a0:a5:51:df:31:2a:9b:4f:d5:43:e8:bd: 68:de:47:b8:71:36:2c:69:c3:f4:81:f3:2e:93:1a: 04:64:b2:9b:1d:60:ad:24:2f:38:70:14:cc:b3:5c: 6e:1f:1d:6d:46:ac:f9:0e:e5:2a:bb:03:7f:1c:d0: 2c:40:c7:40:e5:fc:63:f9:dd:af:31:5c:83:db:01: 0f:e3:5d:e0:36:09:28:db:89:66:a0:2c:72:a9:e9: cc:b5:b8:43:98:eb:50:58:77:c8:36:69:14:0b:b5: ed:c2:e7:5e:70:83:20:9c:eb:8b:7c:f6:4c:c2:6e: 2f:a3:68:3d:84:2c:c9:d5:70:f2:55:1e:0a:ad:57: ef:39:58:c4:9f:17:31:58:d0:42:6a:85:51:96:19: 39:a3:40:e6:cf:a2:f0:67:8e:3b:3f:f6:75:97:cc: db:1f:81:f1:6b:80:e8:65:01:3e:6b:33:3d:5f:bd: 78:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4B:56:C8:EB:AD:D9:BD:27:61:B5:33:17:85:C9:25:03:0E:88:92 X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a633a3a2f34382d3438203d3e203536303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9b80:c::/48 Signature Algorithm: sha256WithRSAEncryption c9:93:d1:a8:e4:f5:49:c6:2b:b9:f6:d6:40:0b:5a:72:93:7d: 89:c7:b5:9c:1b:a9:f1:2d:92:5b:80:40:26:0b:62:dc:43:f0: 96:29:77:ce:3d:6e:88:97:87:34:12:39:a9:ed:a2:31:ef:9b: 1f:90:c9:c2:c4:06:52:dd:3b:81:b8:6b:a3:30:c5:8b:84:d2: 06:45:21:c0:41:b5:55:64:d1:76:4e:b8:db:86:1e:56:97:b2: d8:b7:9d:39:db:27:de:56:d8:4f:cf:3d:e8:5a:90:48:23:7e: d1:91:4b:1f:a6:36:0b:47:a2:2b:89:25:f3:26:50:9d:64:6d: a4:6a:ac:ba:d7:53:da:2f:f8:a4:06:61:0c:f7:38:22:28:00: 2c:eb:50:7c:74:c5:a2:b1:f0:ac:46:78:5f:1d:13:93:2c:31: ab:0a:ca:e5:64:bd:69:13:5e:cc:6d:78:ab:f0:54:ff:21:fc: e5:c3:9f:94:a2:74:64:33:23:f9:be:88:86:7a:c1:0e:a5:32: a0:6b:c0:d9:d3:27:0d:7a:4f:21:d0:a4:c7:0b:7d:c5:a9:c7: 6f:57:82:cb:81:ac:38:42:92:76:22:2f:1a:64:5f:c3:d0:57: 0b:aa:3a:c0:13:ff:97:92:44:54:aa:21:c0:9a:c4:32:e6:8a: d9:48:d3:66 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUCJquSuqtcjye6Ga0VSTuNu4ULtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA0MTUwOTMwMzBaFw0yNzA0MTQwOTM1MzBaMDMxMTAvBgNV BAMTKDhFNEI1NkM4RUJBREQ5QkQyNzYxQjUzMzE3ODVDOTI1MDMwRTg4OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeap0Y3eHniucpxuHE2CYkQIZX gwunz3eCVgTRkT8iqeA8EYX1ZDeCXEZmXT4hhTOeeEY2ZBMS8nXDioU735unajN4 KjKcDp7+mJM496ClUd8xKptP1UPovWjeR7hxNixpw/SB8y6TGgRkspsdYK0kLzhw FMyzXG4fHW1GrPkO5Sq7A38c0CxAx0Dl/GP53a8xXIPbAQ/jXeA2CSjbiWagLHKp 6cy1uEOY61BYd8g2aRQLte3C515wgyCc64t89kzCbi+jaD2ELMnVcPJVHgqtV+85 WMSfFzFY0EJqhVGWGTmjQObPovBnjjs/9nWXzNsfgfFrgOhlAT5rMz1fvXh1AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUjktWyOut2b0nYbUzF4XJJQMOiJIwHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zMjM0MzAzMjNh Mzk2MjM4MzAzYTYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNjMwMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQCm4AADDANBgkqhkiG9w0BAQsFAAOCAQEAyZPRqOT1ScYrufbW QAtacpN9ice1nBup8S2SW4BAJgti3EPwlil3zj1uiJeHNBI5qe2iMe+bH5DJwsQG Ut07gbhrozDFi4TSBkUhwEG1VWTRdk6424YeVpey2LedOdsn3lbYT8896FqQSCN+ 0ZFLH6Y2C0eiK4kl8yZQnWRtpGqsutdT2i/4pAZhDPc4IigALOtQfHTForHwrEZ4 Xx0TkywxqwrK5WS9aRNezG14q/BU/yH85cOflKJ0ZDMj+b6IhnrBDqUyoGvA2dMn DXpPIdCkxwt9xanHb1eCy4GsOEKSdiIvGmRfw9BXC6o6wBP/l5JEVKohwJrEMuaK 2UjTZg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:33:03 2026 by rpki-client